How do I revoke my “Consent to the Processing of Personal Data”? Instructions

Checking the “I agree to the processing of my personal data” box on a website doesn’t mean that my consent cannot be changed. The law gives users the full right to revoke their consent. It’s important to understand how this works and the potential consequences.

What does “revoke consent” mean?

Revocation of consent is a formal request from the user to cease the use of their personal data.
After this, the company is obligated to:

• stop processing the data (unless there are other legal grounds);
• delete or anonymize the data;
• stop transferring the information to third parties.

What the law refers to

In the Russian Federation, this is regulated by Federal Law No. 152-FZ “On Personal Data.” It stipulates:

• the user can revoke consent at any time;
• the company is obligated to stop processing the data, except in cases where it is required by law (e.g., accounting, tax reporting, contract performance).

Instructions “How to revoke consent”

• Find the “Unsubscribe” button on the website you’re interested in (for example, the “Unsubscribe” button).
• Contact the email address specified in the privacy policy;
• A written request to the company (for legally significant actions).

Important: The operator is obligated to provide a simple and clear revocation method.

Can data be completely deleted?

Not always. There are two scenarios:

• Can be deleted: marketing data, newsletter subscriptions, website accounts.
• Cannot be deleted immediately: information that must be legally retained for a certain period (for example, order data for tax purposes). In such cases, processing is limited to these purposes only.

What the website must do after revocation

• Confirm receipt of the request.
• Stop processing data for which there is no longer a legal basis.
• Notify the user that the request has been fulfilled (by law, within 30 days).

Why does the user need this?

• Control. You can limit the use of information if the website no longer needs it.
• Security. Minimizing the risk of data breaches – the less data stored, the less likely it is to be lost.
• Flexibility. Users decide which services to participate in and which communications to receive.

Benefits for companies

• Reduced legal risks: Operating legally protects against Roskomnadzor fines.
• Increased loyalty: A transparent revocation mechanism builds trust with customers.
• Optimization: The company stores only the data that is truly needed.